Return
-
Title
How to delegate read access to users -
Description
Active Roles offers an extensive suite of preconfigured Access Templates that represent typical administrative roles, enabling the correct level of administrative authority to be delegated quickly and consistently. Access Templates significantly simplify the delegation and administration of management rights, speed up the deployment of the delegation model, and reduce management costs.
-
Resolution
In this example the users will only be allowed to view objects and read its properties such as a group object and its members from objects located in a specific OU.
Please follow the steps below to implement this solution:
1.- Navigate to the Configuration container within the ActiveRoles Server MMC
2.- Expand this container and select Active Directory from the list
3.- Double click on Users - Read All Properties4.- Click on the Administration tab
5.- Click the Links button
6.- Click Add
7.- Click Next
8.- Click Add
9.- Enter the desired OU
10.- Click Add
11.- Click OK
12.- Click Next
13.- Click Add
14.- Add the appropriate users/groups to apply this template
15.- Complete the wizard